Static task
static1
Behavioral task
behavioral1
Sample
4ad9c0eafcd159c8c16308868883efaa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4ad9c0eafcd159c8c16308868883efaa.exe
Resource
win10v2004-20231215-en
General
-
Target
4ad9c0eafcd159c8c16308868883efaa
-
Size
214KB
-
MD5
4ad9c0eafcd159c8c16308868883efaa
-
SHA1
330a5a5f8217bc50e5f8e68041ad51db0aff1320
-
SHA256
497b2c1165b1afd797bcaf10b84747946610ea9d1b188be1e977c951615b361d
-
SHA512
eb783c2cd04b930a2fa94f7637b12a4195ca73635292138c5e631ac6d295058e959694cc18f8abe2f03a30efe2974f6d6d9baaab728de246cbfe96f9476933e4
-
SSDEEP
6144:AIOSSQ1ffjC2Bk+RERMSDu12V8gGKQgEjr/uj:AIOS5fO2BlZsu12KgGKQdy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ad9c0eafcd159c8c16308868883efaa
Files
-
4ad9c0eafcd159c8c16308868883efaa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE